medium4.7
CVE-2024-30126
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target web…
Impact
HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Compliance | before 2.0.11 |